exploitDog

CVE-2024-50858

Опубликовано: 14 янв. 2025

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF). An attacker can execute actions via the admin's browser by hosting a malicious URL, leading to data modification, deletion, or exfiltration.

Ссылки

http://www.gestioip.net
Product
https://github.com/maxibelino/CVEs/tree/main/CVE-2024-50858
Exploit
Third Party Advisory
https://github.com/muebel/gestioip-docker-compose
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gestioip:gestioip:3.5.7:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00137

Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVE-2024-50858

CVSS3: 8.8

debian

около 1 года назад

Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Req ...

GHSA-mm92-9vfh-5m9g

CVSS3: 8.8

github

около 1 года назад

Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF). An attacker can execute actions via the admin's browser by hosting a malicious URL, leading to data modification, deletion, or exfiltration.

EPSS

Процентиль: 34%

0.00137

Низкий

8.8 High

CVSS3

Дефекты

CWE-352